Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier: 5d9pr6UNSBXrFNGoEqOfn1HvLirkai4kxamTufPEr+k=
Subject key identifier: D2:A5:D8:C9:C0:CA:16:0D:E6:F8:C9:0C:E0:61:77:0D:E8:F8:FF:E1
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 0198D5F12DB5214C3A6B6B37EC34F419F67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:09 +0000
Manifest this update: Sat 23 Aug 2025 08:00:09 +0000
Manifest next update: Sun 24 Aug 2025 08:00:09 +0000
Files and hashes: 1: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: SVOz6h4XTcQMWpT10pBZfRu/0xQONLzanxh4NDalRwo=)
2: jWNgVTvc3owe3kF91r8d7uRQV_o.roa (hash: uQLZ/d2z4o+33Z42D6wrDoH9q/yv6pAWgOV+vjfJeYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:2d:b5:21:4c:3a:6b:6b:37:ec:34:f4:19:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Aug 23 08:00:09 2025 GMT
Not After : Aug 24 08:00:09 2025 GMT
Subject: CN=d2a5d8c9c0ca160de6f8c90ce061770de8f8ffe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2c:9d:16:80:b1:ba:e4:04:23:12:0d:2b:b6:
50:39:2b:a0:75:31:fb:d0:44:29:0e:a3:a8:6e:8e:
06:b3:dc:fd:78:c9:0c:37:8b:9d:a1:d3:55:57:99:
73:6e:cd:53:f7:31:82:01:55:6c:c0:8e:e6:6c:d4:
c0:e1:85:f7:90:07:72:f2:a9:0e:94:ee:04:dd:28:
a1:b7:3b:5e:1d:c6:51:33:c5:02:68:8f:f8:14:d8:
19:bc:e3:74:a8:b9:d5:e8:72:3e:1e:50:1d:17:d4:
f0:05:ec:90:98:4a:94:21:3e:0c:99:09:01:81:ce:
4d:f7:1a:2f:33:40:59:a8:13:eb:6a:ed:c6:3e:e7:
f9:a7:32:e0:54:01:ff:1d:56:15:63:ed:d2:5d:c2:
8b:ef:6d:ed:48:bc:71:28:e6:f9:21:91:1b:c4:06:
a8:01:3f:ee:13:1e:35:ae:c2:0b:ee:ae:5b:c7:67:
7e:75:18:93:e6:53:69:cf:66:b9:30:64:e6:0c:55:
9e:9e:06:49:f2:d3:21:9d:6e:fb:5d:cf:51:fa:d0:
82:ed:98:d9:03:ea:9b:df:ba:c4:ed:58:62:20:1e:
5d:69:90:d1:85:2d:92:0f:0d:2b:26:87:34:70:eb:
56:5e:7c:f2:c0:77:ab:f1:d7:52:d1:7c:55:77:24:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A5:D8:C9:C0:CA:16:0D:E6:F8:C9:0C:E0:61:77:0D:E8:F8:FF:E1
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ee:1c:99:84:67:d4:f6:4c:f4:f2:08:bc:74:e3:95:89:a1:
b3:c6:28:63:bf:1d:0f:6a:f2:72:45:1e:26:bb:3a:2e:28:9b:
48:14:41:cb:14:70:e2:46:14:31:76:6a:de:63:bf:1f:60:1f:
c9:ba:8d:02:05:3e:0c:99:3b:84:8f:f5:10:23:f7:05:32:54:
9e:d1:61:e4:03:b9:66:04:93:b1:8d:33:f2:17:6d:4f:58:74:
fd:c3:a5:96:48:d6:fb:d2:68:40:21:e1:5f:24:f4:7f:27:f7:
94:d1:9a:82:c6:29:9e:e4:6e:47:4f:4e:29:5b:6b:5b:47:be:
22:90:83:e8:e6:f3:e2:51:5e:e2:81:5f:6f:32:57:e9:fc:0b:
ae:81:42:f1:65:f1:85:77:9a:c9:43:7c:f7:27:e4:8c:09:5f:
76:7f:77:1b:ff:42:0a:6c:e0:92:5b:ec:dd:2b:c9:dc:fa:cc:
75:24:74:3d:02:70:d0:fe:9d:7d:79:a4:aa:83:d7:f8:a6:10:
e6:79:51:a7:34:c3:ff:09:65:25:46:6b:39:38:3d:e3:0c:b3:
62:5c:ef:4e:40:4e:3e:75:9b:14:a0:d0:c9:bb:70:b4:7e:aa:
50:61:e5:55:ca:3f:c4:2d:c1:55:b7:82:04:89:a0:cf:0b:09:
20:0e:c0:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8S21IUw6a2s37DT0GfZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkY2I5NzZiYjYwMjkyMTZmN2EyYWQwNWI3OTMyZjRhNTVl
MGNmOGEwHhcNMjUwODIzMDgwMDA5WhcNMjUwODI0MDgwMDA5WjAzMTEwLwYDVQQD
EyhkMmE1ZDhjOWMwY2ExNjBkZTZmOGM5MGNlMDYxNzcwZGU4ZjhmZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SydFoCxuuQEIxINK7ZQOSugdTH7
0EQpDqOobo4Gs9z9eMkMN4udodNVV5lzbs1T9zGCAVVswI7mbNTA4YX3kAdy8qkO
lO4E3SihtzteHcZRM8UCaI/4FNgZvON0qLnV6HI+HlAdF9TwBeyQmEqUIT4MmQkB
gc5N9xovM0BZqBPrau3GPuf5pzLgVAH/HVYVY+3SXcKL723tSLxxKOb5IZEbxAao
AT/uEx41rsIL7q5bx2d+dRiT5lNpz2a5MGTmDFWengZJ8tMhnW77Xc9R+tCC7ZjZ
A+qb37rE7VhiIB5daZDRhS2SDw0rJoc0cOtWXnzywHer8ddS0XxVdyTc2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKl2MnAyhYN5vjJDOBhdw3o+P/hMB8GA1UdIwQY
MBaAFP3Ll2u2ApIW96KtBbeTL0pV4M+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWIt
ZDg4OGEwNjg5YzE5LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWItZDg4OGEwNjg5YzE5
LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwu4cmYRn
1PZM9PIIvHTjlYmhs8YoY78dD2ryckUeJrs6LiibSBRByxRw4kYUMXZq3mO/H2Af
ybqNAgU+DJk7hI/1ECP3BTJUntFh5AO5ZgSTsY0z8hdtT1h0/cOllkjW+9JoQCHh
XyT0fyf3lNGagsYpnuRuR09OKVtrW0e+IpCD6Obz4lFe4oFfbzJX6fwLroFC8WXx
hXeayUN89yfkjAlfdn93G/9CCmzgklvs3SvJ3PrMdSR0PQJw0P6dfXmkqoPX+KYQ
5nlRpzTD/wllJUZrOTg94wyzYlzvTkBOPnWbFKDQybtwtH6qUGHlVco/xC3BVbeC
BImgzwsJIA7ARA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:16:54 2025 by rpki-client